[GHSA-h524-452v-82p9] Decoding a maliciously-crafted MIME header containing...

[tarampampam]

Updates

• Affected products
• Summary

Comments
Affected versions and package name updated

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates the GHSA advisory metadata by adding a summary and populating the affected package/range information.

Changes:

• Updated the advisory modified timestamp
• Added a summary field
• Filled in the affected section with Go ecosystem package/range and last-known affected range metadata

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[tarampampam]

@copilot remove it

[tarampampam]

Suggested change

	"summary": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. Updated 3 days",
	"summary": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU",

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[tarampampam]

Up

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[shelbyc]

👋 Hi @tarampampam, unfortunately we can't accept this PR because the GitHub Advisory Database doesn't support advisories for issues in the Go standard library, only packages on pkg.go.dev. Thanks for your interest in GHSA-h524-452v-82p9 and the Go ecosystem!